Permissions

Configuring permissions for a specific repository

You can configure permissions for a specific repository, as described in this section. You can also configure permissions for all repositories at once, as described below.

To configure the permissions for a repository:

1. Click the'cog' menu in the FishEye header, and choose Administration. You will need to be logged in as an administrator to see this link.
2. Click Repositories (under 'Repository Settings').
3. Click the name of the repository (in the 'Name' column).

4. Click Permissions in the left-hand panel. See the screenshot below.

5. Configure permissions for the repository as required:

   Repository defaults	Select Use repository defaults to have access to this repository controlled by the default permission settings for all repositories.
   Anonymous access	Select the  Can Read permission for the 'Anonymous' group at the top of the list.
   User group access	Select Can Read for the groups to which you wish to grant that permission.

6. Click Save.

Screenshot: Configuring permissions for a specific repository

Configuring an LDAP restriction

If the LDAP Authentication type is configured in your instance, you can optionally restrict a repository based on an LDAP query.

When an LDAP Restriction is configured for a repository, then the logic to determine whether you can read from a repository is:

Anon access is allowed:
      YES
      Logged in AND...
        all logged in users are allowed & no LDAP Restriction defined?
        YES
        authorised by LDAP Restriction?
        YES
        authorised by group membership?
        YES
      Otherwise:
      NO

See also LDAP authentication.

Configuring permissions for all repositories

You can configure permissions for all repositories at once, as described in this section. You can also configure permissions for a specific repository, as described above.

To configure the permissions for all repositories:

1. Click the'cog' menu in the FishEye header, and choose Administration. You will need to be logged in as an administrator to see this link.
2. Click Defaults (under 'Repository Settings').

3. Click Permissions in the left-hand panel.

4. Configure anonymous access and group permissions for all repositories at once as required:

   Anonymous access	Select the Can Read or Can Write permissions for the 'Anonymous' group at the top of the list.
   User group access	Select Can Read or Can Write for the groups to which you wish to grant those permissions. Note that the Can Write permission only applies to Git repositories that are managed by FishEye and Crucible, and is not used for any other repositories.

5. Remember to click Save changes at the bottom of the screen.

Screenshot: Configuring permissions for all repositories